ac> Most of them will pad with zero. We have a couple of drivers ac> that already pad with something along the lines of "NetBSD is ac> a cool OS too.."

Let's talk about subliminal messages, then. :)

How sensible would it be to have a runtime or compile time option forchoosing between zero padding and random values padding? I think thevariable length of the padding could cause some performance problems,but I'm no kernel hacker nor cryptography expert.

ac> The -ac tree should have the problem fixed for all the drivers ac> I know have the problem or may do.